After creating a connection to a HTTP target sometimes the session does not automatically close when the user stops interacting with the session even after the timeouts have elapsed.
HTTP is a stateless protocol and as such SPS is unable to detect when the connection has been idle and no longer in use (unlike with RDP & SSH which are stateful protocols)
Determining if a connection is idle is based on the network traffic generated by the connection, not the activity of the user. For example, if an application or the taskbar of a graphical desktop displays the time which is updated every minute, it generates network traffic every minute, negating the effects of timeout values greater than one minute and preventing One Identity Safeguard for Privileged Sessions (SPS) from closing the connection.
The session will need to be closed manually.
© 2024 One Identity LLC. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy Cookie Preference Center